Static task
static1
Behavioral task
behavioral1
Sample
fedex shipping doc.exe
Resource
win7-20220812-en
General
-
Target
fedex shipping doc.exe
-
Size
1.1MB
-
MD5
d1f5c585b7f44e7c54126eda3305cb9f
-
SHA1
a171f16f349e23b89bfcb531758f6c9c6c09641c
-
SHA256
62200793920aa308c3684a7e202a2017aaac3538f74b4f5f9f8f27bd6e3aa8f9
-
SHA512
ae6796b90b9db8b5f5638f60a7232de41d4067ba8ef085588f5b91a0cf840dea1b94c89e5fd1e7be2a298a17c207a517ce28e9829df35a4be933e265acc5e927
-
SSDEEP
12288:oka/tA7MLWAJFPECbQavzKpO6/8hzXwl7azjYyx4OKDphtfUmX8IthqWWPLdqUqf:Xa/F/t1zpzgl7MWOKDphpwAq7LUjr
Malware Config
Signatures
Files
-
fedex shipping doc.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ